HHS > HIPAA Home > For Professionals > FAQ > 2065-Is a health care provider permitted to deny an individual’s request for access because the individual has not paid for health care services provided to the individual?

Is a health care provider permitted to deny an individual’s request for access because the individual has not paid for health care services provided to the individual?

No. A covered entity may charge an individual that has requested a copy of her PHI a reasonable, cost-based fee for the copy. See 45 CFR 164.524(c)(4). However, a covered entity may not withhold or deny an individual access to her PHI on the grounds that the individual has not paid the bill for health care services the covered entity provided to the individual.